aws-cdk-lib 2.200.2__py3-none-any.whl → 2.224.0__py3-none-any.whl

aws_cdk/aws_osis/__init__.py

@@ -77,9 +77,13 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_osis import (
+    IPipelineRef as _IPipelineRef_ac9b5b1c,
+    PipelineReference as _PipelineReference_db568ba6,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IPipelineRef_ac9b5b1c, _ITaggable_36806126)
 class CfnPipeline(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -97,6 +101,8 @@ class CfnPipeline(
         # The values are placeholders you should change.
         from aws_cdk import aws_osis as osis
         
+        # policy: Any
+        
         cfn_pipeline = osis.CfnPipeline(self, "MyCfnPipeline",
             max_units=123,
             min_units=123,
@@ -116,6 +122,10 @@ class CfnPipeline(
                 ),
                 is_logging_enabled=False
             ),
+            pipeline_role_arn="pipelineRoleArn",
+            resource_policy=osis.CfnPipeline.ResourcePolicyProperty(
+                policy=policy
+            ),
             tags=[CfnTag(
                 key="key",
                 value="value"
@@ -146,10 +156,13 @@ class CfnPipeline(
         buffer_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipeline.BufferOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         encryption_at_rest_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipeline.EncryptionAtRestOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipeline.LogPublishingOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        pipeline_role_arn: typing.Optional[builtins.str] = None,
+        resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipeline.ResourcePolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         vpc_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPipeline.VpcOptionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::OSIS::Pipeline``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param max_units: The maximum pipeline capacity, in Ingestion Compute Units (ICUs).
@@ -159,6 +172,8 @@ class CfnPipeline(
         :param buffer_options: Options that specify the configuration of a persistent buffer. To configure how OpenSearch Ingestion encrypts this data, set the ``EncryptionAtRestOptions`` . For more information, see `Persistent buffering <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/osis-features-overview.html#persistent-buffering>`_ .
         :param encryption_at_rest_options: Options to control how OpenSearch encrypts buffer data.
         :param log_publishing_options: Key-value pairs that represent log publishing settings.
+        :param pipeline_role_arn: The Amazon Resource Name (ARN) of the IAM role that the pipeline uses to access AWS resources.
+        :param resource_policy: 
         :param tags: List of tags to add to the pipeline upon creation.
         :param vpc_options: Options that specify the subnets and security groups for an OpenSearch Ingestion VPC endpoint.
         '''
@@ -174,6 +189,8 @@ class CfnPipeline(
             buffer_options=buffer_options,
             encryption_at_rest_options=encryption_at_rest_options,
             log_publishing_options=log_publishing_options,
+            pipeline_role_arn=pipeline_role_arn,
+            resource_policy=resource_policy,
             tags=tags,
             vpc_options=vpc_options,
         )
@@ -253,6 +270,12 @@ class CfnPipeline(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="pipelineRef")
+    def pipeline_ref(self) -> _PipelineReference_db568ba6:
+        '''A reference to a Pipeline resource.'''
+        return typing.cast(_PipelineReference_db568ba6, jsii.get(self, "pipelineRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -365,6 +388,36 @@ class CfnPipeline(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "logPublishingOptions", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="pipelineRoleArn")
+    def pipeline_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role that the pipeline uses to access AWS resources.'''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "pipelineRoleArn"))
+
+    @pipeline_role_arn.setter
+    def pipeline_role_arn(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6cca984307f2963eeb4f0db4527a401cf7e431dd5504f7c6c38b8a9f33379d33)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "pipelineRoleArn", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="resourcePolicy")
+    def resource_policy(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnPipeline.ResourcePolicyProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnPipeline.ResourcePolicyProperty"]], jsii.get(self, "resourcePolicy"))
+
+    @resource_policy.setter
+    def resource_policy(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnPipeline.ResourcePolicyProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__572f8477e6c9cfb3f696174970e1dc41dec1aad38d472aa56943c7db80dde8dc)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "resourcePolicy", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
@@ -647,6 +700,58 @@ class CfnPipeline(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_osis.CfnPipeline.ResourcePolicyProperty",
+        jsii_struct_bases=[],
+        name_mapping={"policy": "policy"},
+    )
+    class ResourcePolicyProperty:
+        def __init__(self, *, policy: typing.Any) -> None:
+            '''
+            :param policy: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-osis-pipeline-resourcepolicy.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_osis as osis
+                
+                # policy: Any
+                
+                resource_policy_property = osis.CfnPipeline.ResourcePolicyProperty(
+                    policy=policy
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__fc4aa45dd3afa27eb9ae44d58220b58b63a71a891ef6b5e018b24b51ea896bb2)
+                check_type(argname="argument policy", value=policy, expected_type=type_hints["policy"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "policy": policy,
+            }
+
+        @builtins.property
+        def policy(self) -> typing.Any:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-osis-pipeline-resourcepolicy.html#cfn-osis-pipeline-resourcepolicy-policy
+            '''
+            result = self._values.get("policy")
+            assert result is not None, "Required property 'policy' is missing"
+            return typing.cast(typing.Any, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ResourcePolicyProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_osis.CfnPipeline.VpcAttachmentOptionsProperty",
         jsii_struct_bases=[],
@@ -946,6 +1051,8 @@ class CfnPipeline(
         "buffer_options": "bufferOptions",
         "encryption_at_rest_options": "encryptionAtRestOptions",
         "log_publishing_options": "logPublishingOptions",
+        "pipeline_role_arn": "pipelineRoleArn",
+        "resource_policy": "resourcePolicy",
         "tags": "tags",
         "vpc_options": "vpcOptions",
     },
@@ -961,6 +1068,8 @@ class CfnPipelineProps:
         buffer_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.BufferOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         encryption_at_rest_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.EncryptionAtRestOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.LogPublishingOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        pipeline_role_arn: typing.Optional[builtins.str] = None,
+        resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.ResourcePolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
         vpc_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.VpcOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
@@ -973,6 +1082,8 @@ class CfnPipelineProps:
         :param buffer_options: Options that specify the configuration of a persistent buffer. To configure how OpenSearch Ingestion encrypts this data, set the ``EncryptionAtRestOptions`` . For more information, see `Persistent buffering <https://docs.aws.amazon.com/opensearch-service/latest/developerguide/osis-features-overview.html#persistent-buffering>`_ .
         :param encryption_at_rest_options: Options to control how OpenSearch encrypts buffer data.
         :param log_publishing_options: Key-value pairs that represent log publishing settings.
+        :param pipeline_role_arn: The Amazon Resource Name (ARN) of the IAM role that the pipeline uses to access AWS resources.
+        :param resource_policy: 
         :param tags: List of tags to add to the pipeline upon creation.
         :param vpc_options: Options that specify the subnets and security groups for an OpenSearch Ingestion VPC endpoint.
 
@@ -985,6 +1096,8 @@ class CfnPipelineProps:
             # The values are placeholders you should change.
             from aws_cdk import aws_osis as osis
             
+            # policy: Any
+            
             cfn_pipeline_props = osis.CfnPipelineProps(
                 max_units=123,
                 min_units=123,
@@ -1004,6 +1117,10 @@ class CfnPipelineProps:
                     ),
                     is_logging_enabled=False
                 ),
+                pipeline_role_arn="pipelineRoleArn",
+                resource_policy=osis.CfnPipeline.ResourcePolicyProperty(
+                    policy=policy
+                ),
                 tags=[CfnTag(
                     key="key",
                     value="value"
@@ -1030,6 +1147,8 @@ class CfnPipelineProps:
             check_type(argname="argument buffer_options", value=buffer_options, expected_type=type_hints["buffer_options"])
             check_type(argname="argument encryption_at_rest_options", value=encryption_at_rest_options, expected_type=type_hints["encryption_at_rest_options"])
             check_type(argname="argument log_publishing_options", value=log_publishing_options, expected_type=type_hints["log_publishing_options"])
+            check_type(argname="argument pipeline_role_arn", value=pipeline_role_arn, expected_type=type_hints["pipeline_role_arn"])
+            check_type(argname="argument resource_policy", value=resource_policy, expected_type=type_hints["resource_policy"])
             check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
             check_type(argname="argument vpc_options", value=vpc_options, expected_type=type_hints["vpc_options"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -1044,6 +1163,10 @@ class CfnPipelineProps:
             self._values["encryption_at_rest_options"] = encryption_at_rest_options
         if log_publishing_options is not None:
             self._values["log_publishing_options"] = log_publishing_options
+        if pipeline_role_arn is not None:
+            self._values["pipeline_role_arn"] = pipeline_role_arn
+        if resource_policy is not None:
+            self._values["resource_policy"] = resource_policy
         if tags is not None:
             self._values["tags"] = tags
         if vpc_options is not None:
@@ -1124,6 +1247,25 @@ class CfnPipelineProps:
         result = self._values.get("log_publishing_options")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipeline.LogPublishingOptionsProperty]], result)
 
+    @builtins.property
+    def pipeline_role_arn(self) -> typing.Optional[builtins.str]:
+        '''The Amazon Resource Name (ARN) of the IAM role that the pipeline uses to access AWS resources.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-osis-pipeline.html#cfn-osis-pipeline-pipelinerolearn
+        '''
+        result = self._values.get("pipeline_role_arn")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def resource_policy(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipeline.ResourcePolicyProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-osis-pipeline.html#cfn-osis-pipeline-resourcepolicy
+        '''
+        result = self._values.get("resource_policy")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipeline.ResourcePolicyProperty]], result)
+
     @builtins.property
     def tags(self) -> typing.Optional[typing.List[_CfnTag_f6864754]]:
         '''List of tags to add to the pipeline upon creation.
@@ -1174,6 +1316,8 @@ def _typecheckingstub__f7720fc023720b487ee160161639df896ae055ed55f72c575e20e1b94
     buffer_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.BufferOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     encryption_at_rest_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.EncryptionAtRestOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.LogPublishingOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    pipeline_role_arn: typing.Optional[builtins.str] = None,
+    resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.ResourcePolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     vpc_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.VpcOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
@@ -1234,6 +1378,18 @@ def _typecheckingstub__7b44b1fb090de1c3a97c62326f13cf12ff45ba873b47547be0cd3ea86
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__6cca984307f2963eeb4f0db4527a401cf7e431dd5504f7c6c38b8a9f33379d33(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__572f8477e6c9cfb3f696174970e1dc41dec1aad38d472aa56943c7db80dde8dc(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnPipeline.ResourcePolicyProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__678a542f1777226f3ecd76ae89117b1cbf99c7a46ef4c26f32370792db69c5ad(
     value: typing.Optional[typing.List[_CfnTag_f6864754]],
 ) -> None:
@@ -1275,6 +1431,13 @@ def _typecheckingstub__c2a4597a1154076637de8b0314d4ccfd1e5283d50069d827a0d01e2cc
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__fc4aa45dd3afa27eb9ae44d58220b58b63a71a891ef6b5e018b24b51ea896bb2(
+    *,
+    policy: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7f17f2ecfc08a6464c5ca6cd5911cac75c468f44896510a68deda49d3d5b62ba(
     *,
     attach_to_vpc: typing.Union[builtins.bool, _IResolvable_da3f097b],
@@ -1311,6 +1474,8 @@ def _typecheckingstub__e5ae24cae502e48ff4f681bebbc941bf569bb00330722c27b6a689ced
     buffer_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.BufferOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     encryption_at_rest_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.EncryptionAtRestOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     log_publishing_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.LogPublishingOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    pipeline_role_arn: typing.Optional[builtins.str] = None,
+    resource_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.ResourcePolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     vpc_options: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnPipeline.VpcOptionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:

aws_cdk/aws_panorama/__init__.py

@@ -67,9 +67,17 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_panorama import (
+    ApplicationInstanceReference as _ApplicationInstanceReference_011533a2,
+    IApplicationInstanceRef as _IApplicationInstanceRef_530e8c33,
+    IPackageRef as _IPackageRef_675e27b7,
+    IPackageVersionRef as _IPackageVersionRef_ace03ee8,
+    PackageReference as _PackageReference_e44c01fe,
+    PackageVersionReference as _PackageVersionReference_83c42bde,
+)
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IApplicationInstanceRef_530e8c33, _ITaggable_36806126)
 class CfnApplicationInstance(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -131,7 +139,8 @@ class CfnApplicationInstance(
         runtime_role_arn: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Panorama::ApplicationInstance``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param default_runtime_context_device: The device's ID.
@@ -160,6 +169,48 @@ class CfnApplicationInstance(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromApplicationInstanceArn")
+    @builtins.classmethod
+    def from_application_instance_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IApplicationInstanceRef_530e8c33:
+        '''Creates a new IApplicationInstanceRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a9f4f68f6afad3612ec12bf875c21240c719f76be3cb147ecb5aa8e2041ee7b3)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IApplicationInstanceRef_530e8c33, jsii.sinvoke(cls, "fromApplicationInstanceArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromApplicationInstanceId")
+    @builtins.classmethod
+    def from_application_instance_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        application_instance_id: builtins.str,
+    ) -> _IApplicationInstanceRef_530e8c33:
+        '''Creates a new IApplicationInstanceRef from a applicationInstanceId.
+
+        :param scope: -
+        :param id: -
+        :param application_instance_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__cf3c71beda280e35f7832b3400f0af821e251042c4f89db4b42f5975db8cb61e)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument application_instance_id", value=application_instance_id, expected_type=type_hints["application_instance_id"])
+        return typing.cast(_IApplicationInstanceRef_530e8c33, jsii.sinvoke(cls, "fromApplicationInstanceId", [scope, id, application_instance_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -190,6 +241,12 @@ class CfnApplicationInstance(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="applicationInstanceRef")
+    def application_instance_ref(self) -> _ApplicationInstanceReference_011533a2:
+        '''A reference to a ApplicationInstance resource.'''
+        return typing.cast(_ApplicationInstanceReference_011533a2, jsii.get(self, "applicationInstanceRef"))
+
     @builtins.property
     @jsii.member(jsii_name="attrApplicationInstanceId")
     def attr_application_instance_id(self) -> builtins.str:
@@ -689,7 +746,7 @@ class CfnApplicationInstanceProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
+@jsii.implements(_IInspectable_c2943556, _IPackageRef_675e27b7, _ITaggable_36806126)
 class CfnPackage(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -743,7 +800,8 @@ class CfnPackage(
         storage_location: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnPackage.StorageLocationProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Panorama::Package``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param package_name: A name for the package.
@@ -760,6 +818,48 @@ class CfnPackage(
 
         jsii.create(self.__class__, self, [scope, id, props])
 
+    @jsii.member(jsii_name="fromPackageArn")
+    @builtins.classmethod
+    def from_package_arn(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        arn: builtins.str,
+    ) -> _IPackageRef_675e27b7:
+        '''Creates a new IPackageRef from an ARN.
+
+        :param scope: -
+        :param id: -
+        :param arn: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__dbb1b4451fa22057cbdadb664b6b5291a345b0219fd29e15b98a5e75bc902dc5)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument arn", value=arn, expected_type=type_hints["arn"])
+        return typing.cast(_IPackageRef_675e27b7, jsii.sinvoke(cls, "fromPackageArn", [scope, id, arn]))
+
+    @jsii.member(jsii_name="fromPackageId")
+    @builtins.classmethod
+    def from_package_id(
+        cls,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        package_id: builtins.str,
+    ) -> _IPackageRef_675e27b7:
+        '''Creates a new IPackageRef from a packageId.
+
+        :param scope: -
+        :param id: -
+        :param package_id: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__036c08570129c334f6bca1d78d3bbd858ea49a86a6495c2d28a66c5f7fdd60a9)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+            check_type(argname="argument package_id", value=package_id, expected_type=type_hints["package_id"])
+        return typing.cast(_IPackageRef_675e27b7, jsii.sinvoke(cls, "fromPackageId", [scope, id, package_id]))
+
     @jsii.member(jsii_name="inspect")
     def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
         '''Examines the CloudFormation resource and discloses attributes.
@@ -867,6 +967,12 @@ class CfnPackage(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="packageRef")
+    def package_ref(self) -> _PackageReference_e44c01fe:
+        '''A reference to a Package resource.'''
+        return typing.cast(_PackageReference_e44c01fe, jsii.get(self, "packageRef"))
+
     @builtins.property
     @jsii.member(jsii_name="tags")
     def tags(self) -> _TagManager_0a598cb3:
@@ -1143,7 +1249,7 @@ class CfnPackageProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IPackageVersionRef_ace03ee8)
 class CfnPackageVersion(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -1194,7 +1300,8 @@ class CfnPackageVersion(
         owner_account: typing.Optional[builtins.str] = None,
         updated_latest_patch_version: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::Panorama::PackageVersion``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param package_id: A package ID.
@@ -1308,6 +1415,12 @@ class CfnPackageVersion(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="packageVersionRef")
+    def package_version_ref(self) -> _PackageVersionReference_83c42bde:
+        '''A reference to a PackageVersion resource.'''
+        return typing.cast(_PackageVersionReference_83c42bde, jsii.get(self, "packageVersionRef"))
+
     @builtins.property
     @jsii.member(jsii_name="packageId")
     def package_id(self) -> builtins.str:
@@ -1565,6 +1678,22 @@ def _typecheckingstub__efd0ba4cd6c0b4ee9023df6f956444617b610a622dce5eb667859d9d3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__a9f4f68f6afad3612ec12bf875c21240c719f76be3cb147ecb5aa8e2041ee7b3(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__cf3c71beda280e35f7832b3400f0af821e251042c4f89db4b42f5975db8cb61e(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    application_instance_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__f02c8fd6f1a71465462afea3d559ebb5b8ea0af1bc67afc99474bf782789ec30(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:
@@ -1664,6 +1793,22 @@ def _typecheckingstub__014b23b28acc37a82edebe15e1628f0ee03393a0354f498b25ce8519a
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__dbb1b4451fa22057cbdadb664b6b5291a345b0219fd29e15b98a5e75bc902dc5(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    arn: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__036c08570129c334f6bca1d78d3bbd858ea49a86a6495c2d28a66c5f7fdd60a9(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    package_id: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d571cb582323b52428cb462f12dd0ba0765010a338ed79ea157b3fc920aa535a(
     inspector: _TreeInspector_488e0dd5,
 ) -> None:

aws_cdk/aws_paymentcryptography/__init__.py

@@ -77,9 +77,15 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..interfaces.aws_paymentcryptography import (
+    AliasReference as _AliasReference_7c9b8e7b,
+    IAliasRef as _IAliasRef_265a1f77,
+    IKeyRef as _IKeyRef_3ba31f45,
+    KeyReference as _KeyReference_c2ca63d7,
+)
 
 
-@jsii.implements(_IInspectable_c2943556)
+@jsii.implements(_IInspectable_c2943556, _IAliasRef_265a1f77)
 class CfnAlias(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -128,7 +134,8 @@ class CfnAlias(
         alias_name: builtins.str,
         key_arn: typing.Optional[builtins.str] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::PaymentCryptography::Alias``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param alias_name: A friendly name that you can use to refer to a key. The value must begin with ``alias/`` . .. epigraph:: Do not include confidential or sensitive information in this field. This field may be displayed in plaintext in AWS CloudTrail logs and other output.
@@ -172,6 +179,12 @@ class CfnAlias(
         '''The CloudFormation resource type name for this resource class.'''
         return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
 
+    @builtins.property
+    @jsii.member(jsii_name="aliasRef")
+    def alias_ref(self) -> _AliasReference_7c9b8e7b:
+        '''A reference to a Alias resource.'''
+        return typing.cast(_AliasReference_7c9b8e7b, jsii.get(self, "aliasRef"))
+
     @builtins.property
     @jsii.member(jsii_name="cfnProperties")
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
@@ -285,7 +298,7 @@ class CfnAliasProps:
         )
 
 
-@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+@jsii.implements(_IInspectable_c2943556, _IKeyRef_3ba31f45, _ITaggableV2_4e6798f8)
 class CfnKey(
     _CfnResource_9df397a6,
     metaclass=jsii.JSIIMeta,
@@ -365,7 +378,8 @@ class CfnKey(
         key_check_value_algorithm: typing.Optional[builtins.str] = None,
         tags: typing.Optional[typing.Sequence[typing.Union[_CfnTag_f6864754, typing.Dict[builtins.str, typing.Any]]]] = None,
     ) -> None:
-        '''
+        '''Create a new ``AWS::PaymentCryptography::Key``.
+
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
         :param exportable: Specifies whether the key is exportable. This data is immutable after the key is created.
@@ -459,6 +473,12 @@ class CfnKey(
     def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
         return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
 
+    @builtins.property
+    @jsii.member(jsii_name="keyRef")
+    def key_ref(self) -> _KeyReference_c2ca63d7:
+        '''A reference to a Key resource.'''
+        return typing.cast(_KeyReference_c2ca63d7, jsii.get(self, "keyRef"))
+
     @builtins.property
     @jsii.member(jsii_name="exportable")
     def exportable(self) -> typing.Union[builtins.bool, _IResolvable_da3f097b]: